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The  overall  goal  of  this  project  is  the  design  of  self-checking  computers  and  fault-tolerant 
memory  systems  with  low  overhead  and  high  reliability.  During  the  research,  we  focused  our 
research  on  the  determination  of  more  efficient  approach  for  realization  of  self-checking  systems  and 
dc  eloping  new  approach  for  fault-tolerant  memory  systems.  The  research  conducted  in  this  project 
is  summarized  under  five  different  topics  given  below.  Fifteen  papers  have  been  published  by  the  PI 
under  the  contract  and  were  listed  in  Section  6.  Abstracts  of  these  papers  are  included  at  the  end  of 
this  report. 


1.  Self-Checking  System  Designs 
1.1  Totally  Self-Checking  Systems 

We  investigated  designs  of  Self-Checking  systems.  This  lead  us  to  a  new  viewpoint  that  a 
totally  self-checking  (TSQ  system  can  be  regarded  as  a  connection  of  TSC  subsystems  without 
using  checkers  at  the  embedded  interfaces  except  at  the  primary  output  of  the  system.  That  is,  each 
subsystem  is  Totally  Self-Checking  and  Code-Disjoint  (TSC-CD).  By  this  motivation,  we  studied 
the  problem  of  designing  TSC-CD  Programmable  Logic  Array  (PLA)  for  combinational  circuits.  We 
have  introduced  a  design  method  of  TSC-CD  PLA  for  combinational  circuits.  This  method  general¬ 
ized  the  realization  of  CD  combinational  circuits,  which  was  proposed  by  Nanya  et  al.  in  1989.  The 
hardware  overhead  will  be  reduced  significantly  using  this  method.  For  example,  the  input  code  and 
the  output  code  are  the  Berger  codes  with  length  ( n  +  Uog2nJ  +1 ),  the  additional  hardware  require- 
2-(Llog2nJ  +  l) 


ment  is  about 


-.  In  addition,  we  also  derived  an  algorithm  for  choosing  D(lhCi) 


function  (for  detail  see  [6]).  This  algorithm  is  very  similar  to  the  Quine-MaChtskey  algorithm  for _ 
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formal  minimization  procedure  for  two-level  Boolean  expressions.  Once  the  vectors  Df/j.C,)  are  — 
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chosen,  using  an  algorithm  to  simplify  a  multiple  output  Boolean  function  into  a  near  minimal  sum- 
of-products  for  PLAs,  the  TSC-CD  PLA  of  combinational  circuit  is  designed. 

This  design  method  can  also  be  applied  to  that  of  TSC-CD  Moore  type  sequential  circuits,  in 
which  the  next-state  functions  and  the  output  functions  will  be  implemented  by  the  PLA.  On  the 
other  hand,  TSC  checkers  are  all  TSC-CD  combinational  circuits.  Therefore,  the  design  method  has 
also  solved  the  problem  of  designing  the  checkers  with  PLA. 

The  results  of  TSC-CD  PLA  design  for  combinational  circuits  has  been  presented  as  a  pape/  at 
the  Indian  Computing  Congress  1991. 

1.2  Strongly  Fault-Secure  Systems 

However,  the  combination  of  a  TSC  and  CD  circuit  is  more  difficult  to  implement  than 
strongly  fault-secure  (SFS)  and  strongly  code-disjoint  (SCD)  circuit  Generalizing  the  previous 
theory  to  the  SFS-SCD  combinational  circuits,  we  have  developed  a  PLA  design  scheme  to  achieve 
both  SFS  and  SCD.  Each  SFS  and  SCD  combinational  circuit  is  formed  by  two  PLAs.  The  first 
PLA  receives  only  the  information  part  of  input  to  generate  the  information  part  of  output  and  k  -  r 
least  signification  check  bits  of  the  output,  where  *  is  the  check  bit  length.  The  second  PLA  receives 
both  information  part  and  check  part  of  input  to  generate  the  r  most  significant  check  bits  of  the  out¬ 
put  for  r  2  1.  The  selection  of  r  depends  on  the  implemented  function  to  achieve  a  higher  imple¬ 
mentation  efficiency.  We  also  compared  this  design  with  a  recent  design  by  Nanya  and  Uchida  and 
found  that  this  design  was  simple  in  structure  and  faster  in  error  checking.  This  design  details  can  be 
found  in  the  a  technical  report  "  The  Design  of  Strongly  Fault-Secure  and  Strongly  Code-Disjoint 
PLAs  ". 
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2.  Berger  Check  Prediction  and  Berger  Checker 


2.1  Berger  Check  Prediction  and  Reduced  Berger  Check  Prediction 

We  have  developed  a  theory  for  Berger  check  prediction  (BCP).  By  this  theory  the  Berger  code 
is  applied  to  the  arithmetic  and  logic  unit  (ALU),  then  the  entire  processor  is  Berger  encoded  and  this 
would  result  in  the  most  efficient  design.  A  novel  scheme  to  design  concurrent-error-detecting  ALU 
and  a  strongly  fault-secure  ALU  design  based  on  the  BCP  technique  have  been  written  in  two  papers, 
which  have  been  published  in  IEEE  Trans,  on  Computers  and  IEEE  Trans,  on  Computer-Aided 
Design  of  Integrated  Circuits  and  Systems,  respectively.  Recently,  we  further  developed  a  theory  for 
reduced  Berger  check  prediction  (RBCP).  By  this  new  theory,  a  reduced  Berger  code,  which  uses 
only  the  two  least  significant  check  bits  of  its  Berger  code,  is  used  to  encode  both  operands  and  the 
computation  result  for  ALU.  Since  a  Berger  code  requires  T  log2(n  +  1)1  check  bits  for  n  informa¬ 
tion  bits,  the  application  of  reduced  Berger  code  yields  more  efficient  implementation  of  a  strongly 
fault-secure  ALU  then  the  previous  BCP.  A  paper  was  written  on  these  results  and  has  been  pub¬ 
lished  in  1993  Proceeding  of  Fifth  Annual  IEEE  International  Conference  on  Wafer  Scale  Integra¬ 
tion  pp.  163- 172. 

2.2  A  New  Design  of  Berger  Code  Checker 

Berger  codes  are  the  only  known  systematic  all  unidirectional  error  detecting  codes  and  they 
are  widely  applied  in  fault-tolerant  systems.  Therefore,  designing  a  better  Berger  code  checker  is 
very  important  The  most  well  known  structure  of  Berger  code  checker  is  usually  referred  to  as  nor¬ 
mal  checker  and  is  to  generate  the  replicated  check  bits  of  value  complementary  to  the  original  ones 
and  to  compare  them  by  a  two-rail  comparator.  In  1989,  a  design  of  totally  self-checking  Berger 
code  checker  using  a  Berger  code  partitioning  scheme  has  been  proposed  by  Piestrak.  This  design 
proceeds  from  the  idea  that  any  Berger  code  can  be  constructed  from  u  -  ["(  I  I  I  +  1  V2l  m-out-of-n 
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codes,  where  III  is  the  number  of  information  bits,  m  -  1,3,  5, ... ,  2«  -  1  and  n  -  I  I  I  +  1. 
Compared  with  the  normal  checker,  this  method  offers  an  improvement  in  delay  but  with  a  great 
cost  in  hardware. 

We  generalized  Berger  code  partitioning  scheme  and  applied  this  method  to  the  Programmable 
logic  array  based  design  of  a  TSC  Berger  code  checker.  The  Piestrak’s  Berger  code  partitioning 
scheme  is  a  special  case  of  our  generalized  Berger  code  partitioning  scheme.  We  also  proved  that 
any  Berger  code  can  be  converted,  if  necessary,  to  a  suitable  2s  form,  i.e.,  any  Berger  code  can  be 
constructed  from  m-out-of-21  + 1  codes.  Furthermore,  we  also  developed  a  design  of  m-out-of-2I+1 
code  checkers  via  PLA,  which  have  a  regular  structure  and  a  reduced  circuit  complexity  O (n2)  for 
codewords  of  length  n. 

These  results  have  been  written  in  an  extended  abstract  of  a  paper  "  The  design  of  Totally  Self- 
Checking  Berger  Code  Checkers  Based  on  Generalized  Berger  Code  Partition  ",  which  was 
presented  at  ONR  Dependable  Computing  Workshop  Nov.  12-13,  1991,  and  this  paper  has  been 
accepted  for  publication  in  IEEE  Trans,  on  Computers. 

3.  Fault-Tolerant  Memory  Systems 

For  a  Self-Checking  computer  or  processor,  fault-tolerant  memory  system  is  a  important  part 
In  some  computer  memory  systems  in  which  the  data  are  stored  in  a  byte-per-chip  or  byte-per-card 
fashion,  the  errors  are  likely  to  be  confined  to  one  or  a  few  bytes.  For  this  kind  of  computer  memory 
system,  it  is  often  probable  that  when  errors  occur  in  multiple  bytes  the  errors  will  be  unidirectional 
within  each  individual  byte.  However,  the  errors  in  one  byte  may  be  of  the  form  l-»0  while  in 
another  byte  they  may  be  of  the  form  0-»l.  When  a  memory  word  is  handled  as  a  whole,  unidirec¬ 
tional  errors  of  a  single  form  may  occur  across  the  entire  word. 


The  codes,  which  can  detect  some  small  number  t  of  unidirectional  byte  errors  in  computer 
memory  words  composed  of  small  information  bytes  each  containing  b  bits,  and  simultaneously 
detect  all  unidirectional  errors  across  the  entire  memory  word,  were  developed  by  Dunning,  Dial  and 
Varanasi.  These  codes  always  use  two  additional  b-bit  bytes  to  hold  parity  check  information  and 
were  said  to  be  t-unidirectional  byte  error  detecting  and  all  unidirectional  error  detecting  (t- 
UbED/AUED)  codes.  We  generalized  the  construction  of  the  t-UbED/AUED  codes  proposed  by 
Dunning  et  al.  to  any  t  and  improved  these  codes  in  the  case  of  /  >  3.  Thus,  more  efficient  t- 
UbED/AUED  codes  are  found.  These  results  have  been  written  as  a  paper  "Efficient  Multiple  Byte 
Unidirectional  Error-Detecting  Codes  for  Computer  Memory  Systems",  which  was  published  in 
Proceeding  of  The  Twenty  Second  International  Symposium  on  Fault-Tolerance  Computing. 

4  Algorithm-Based  Fault  Tolerance  Systems 

Algorithm-based  fault  tolerance  (ABFT)  is  a  scheme  which  improves  the  reliability  of  parallel 
systems  with  very  low  overhead  compared  to  other  fault  tolerance  schemes  with  similar  benefits.  It 
was  proposed  by  Huang  and  Abraham  for  parallel  matrix  operations  in  1984.  This  scheme  is  dis¬ 
tinguished  by  three  characteristics:  (1)  encode  data  at  a  higher  level;  (2)  redesign  algorithms  to 
operate  on  the  encoded  data;  (3)  distribute  the  computation  steps  of  the  redesigned  algorithm  among 
computation  processors,  such  that  failure  of  any  processor  affects  as  tew  data  as  possible.  Possessing 
these  characteristics,  ABFT  is  a  novel  system-level  method  of  achieving  high  reliability.  Since  1984, 
a  lot  of  papers  applying  this  scheme  to  parallel  systems  have  appeared. 

In  order  to  efficiently  apply  ABFT  to  more  parallel  systems,  the  encoding  of  data  such  that 
multiple  errors,  especially  a  group  of  errors,  can  be  detected  or  corrected  is  a  central  problem.  Unfor¬ 
tunately,  few  papers  have  addressed  this  problem.  We  investigated  the  problem  of  encoding  of  data 
for  ABFT  systems  and  have  developed  a  new  encoding  scheme.  The  significance  of  this  scheme  is 
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that  any  linear  binary  error-correcting  code  can  be  used  to  derive  an  error-correcting  code  over  Z2- 
with  the  same  length  and  rate.  Since  in  coding  theory,  lot  of  work  about  choosing  better  binary  linear 
codes  and  decodings  of  the  better  codes  has  been  done,  using  this  scheme  the  efficient  linear  error- 
correcting  codes  over  Z2«  with  any  parameters  can  be  easily  found.  We  have  also  introduced  two 
kinds  of  error-correcting  codes  over  Z2-.  They  are  the  BCH-like  codes  and  the  Reed-Solomon-like 
codes,  which  are  derived  by  the  BCH  codes  and  the  Reed-Solomon  codes,  respectively.  These  two 
kind  of  codes  over  Z2-  are  very  useful  to  the  ABFT  systems.  We  also  developed  two  decoding  pro¬ 
cedures  for  these  two  kinds  of  codes.  The  results  have  been  written  as  a  paper  "Error  Correcting 
Codes  over  Z2-  for  Algorithm-Based  Fault  Tolerance,  which  has  been  accepted  for  publication  in 
IEEE  Trans,  on  Computers  . 

5.  Coding  Theory 

5.1.  Decoding  for  Algebraic  Geometric  Codes 

The  introduction  of  algebraic  geometric  codes  is  the  most  important  development  in  the  theory 
of  error-correcting  codes  in  the  past  ten  years.  Tsfasman,  Vladut  and  Zink  (1982)  showed  an 
extremely  exciting  result,  that  is,  the  existence  of  a  sequence  of  codes,  which  exceeds  the  Gilbert- 
Varshamov  bound.  For  this  paper  they  received  the  IEEE  Information  Theory  Group  Paper  Award 
for  1983.  Since  then,  many  papers  dealing  with  algebraic  geometric  codes  and  their  decoding  pro¬ 
cedures  have  appeared.  Good  code  constructions  are  very  important  Moreover,  it  is  desirable  and 
important  to  derive  simple  decoding  procedures  which  can  correct  as  many  errors  as  possible.  How- 

, d*-\  i 

ever,  any  simple  decoding  procedure,  which  can  correct  errors  up  to  L — - — J,  has  not  been 
presented  yet  where  d+  is  the  designed  minimum  distance  of  the  algebraic  geometric  code. 


We  investigated  this  problem  and  derived  a  simple  decoding  procedure  for  algebraic  geometric 

d^“  1 

codes,  which  can  correct  any  L — or  less  errors  with  a  complexity  0(n3).  This  decoding  pro¬ 
cedure  employs  a  modified  fundamental  iterative  algorithm  that  has  been  introduced  to  derive  the 
Berlekamp-Massey  algorithm,  and  utilizes  the  error-correcting  capability  of  the  code.  In  principle,  it 
is  a  generalization  of  Peterson’s  decoding  procedure  for  the  BCH  codes.  This  decoding  procedure, 
called  as  Feng-Rao  decoding  procedure,  is  considered  as  a  major  breakthrough  in  this  field  and  has 
been  written  as  a  paper,  which  was  presented  at  the  Ninth  International  Symposium  on  Applied  Alge¬ 
bra,  Algebraic  Algorithms  and  Error-Correcting  Codes  and  published  in  IEEE  Trans,  on  Informa¬ 
tion  Theory  pp.  37-45,  Jan.  1993.  We  also  investigated  a  fast  decoding  procedure  for  algebraic- 

geometric  codes,  which  can  correct  any  L  ^  1  J  or  less  errors  with  a  complexity  0(n7/3).  This 

decoding  procedure  has  been  written  as  a  paper  and  this  paper  has  been  accepted  for  publication  in 
IEEE  Trans,  on  Information  Theory.  We  also  have  developed  an  erasures-and-errors  decoding  pro¬ 
cedure  for  algebraic-geometric  codes.  The  result  has  been  published  at  the  1993  IEEE  Information 
Theory  Workshop  as  an  invited  talk. 

5.2.  A  New  Approach  for  Algebraic  Geometric  Codes 

The  current  algebraic-geometric  codes  are  based  on  the  theory  of  algebraic  geometric  curves. 
We  investigated  a  simple  approach  for  the  construction  of  algebraic-geometric  codes  which  does  not 
require  an  extensive  background  in  algebraic  geometry.  Given  an  affine  plane  irreducible  curve  and 
all  its  rational  points,  we  can  find  a  sequence  of  monomials  x  V  based  on  the  equation  of  the  curve. 
Using  the  first  r  monomials  as  a  basis  for  the  dual  code  of  a  linear  code,  the  designed  minimum  dis¬ 
tance  d  of  the  linear  code,  called  algebraic-geometric  code,  can  be  easily  determined.  For  these 
codes,  we  show  a  fast  decoding  procedure  with  a  complexity  O (n7/3),  which  can  correct  errors  up  to 
L(d  - 1  )/2j.  For  this  approach  it  is  neither  necessary  to  know  the  genus  of  curve  nor  the  basis  of  a 
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differential  form.  This  approach  can  be  easily  understood  by  most  engineers.  In  this  research,  we 
have  obtained  a  new  improvement  of  the  Goppa  bound,  called  the  Feng-Rao  bound.  We  also  gen¬ 
eralized  this  result  to  the  codes  from  the  curves  in  high-dimensional  speces.  These  results  are  written 
as  two  papers  "  A  Simple  Approach  for  Construction  of  Algebraic  Geometric  Codes  from  Affine 
Plane  Curves"  and  "A  Class  of  Algebraic  Geometric  Codes  from  Curves  in  High-Dimensional 
Spaces",  which  were  presented  at  IEEE  International  Symposium  on  Information  Theory  1993  and 
10th  International  Symposium,  Applied  Algebrais  Algorithms  and  Error-Correcting  Codes,  respec¬ 
tively.  The  first  paper  will  appear  in  IEEE  Trans,  on  Information  Theory  and  the  second  paper  has 
been  published  in  Lecture  Notes  in  Computer  Science  673  pp.  132-146.  May,1993. 
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Attract —  This  correspondence  shows  necessary  and  sufficient  con¬ 
ditions  for  r-uoidirectional  error  correcting  and  <f-unidirectk>nal  error 
detecting  ir-LEC  and  d-LEDi  codes  and  corrects  an  error  in  a  theorem 
previously  published  on  /-LEC  and  d-LED  codes  [1|. 

Index  Terms —  Asymmetric  errors,  error  correction,  error  detection, 
error  protection.  Hamming  distance,  unidirectional  errors. 

I.  Introduction 

Unidirectional  error  correcting  and/or  detecting  codes  have  been 
extensively  investigated  by  several  authors  [l]-[3],  etc.,  and  have 
provided  a  powerful  tool  for  error  protection  in  LSI  memories  in 
w hich  the  most  likely  faults  cause  unidirectional  errors  [l)-[3].  In 
Theorem  2  1  of  Lin  and  Bose  [1],  the  authors  have  given  a  necessary 
and  sufficient  condition  for  a  binary  code  C  to  be  a  /-unidirectional 
error  correcting  and  did  >  /'-unidirectional  error  detecting  (f-UEC 
and  /-LED)  code  In  this  correspondence,  we  adopt  the  same  notation 
as  in  [  1 1  In  [1]  the  necessary  and  sufficient  conditions  for  a  binary 
'  LEC  and  ./-LED  code  C  are  given  as 

a  D'X.Yi  =  .YiA.Y)  +  .Y(Y.A)  2*  f -W  +  1.  or  "I 
I.  inmf.Yi  X.  Y ).  A’lY.  A")}  ^  t  +  1  J 

(1) 

lor  all  X  —  t  Ao-  A  i  •  •  •  ■  -  A  n-i ).  Y  =  I  To  -  T  i .  .  T  n  —  i ). 

A  *  Y  belonging  to  C.  where  YiA.Y )  denotes  the  number  of 
—  0  crossovers  from  X  to  Y.  i.e.,  A'(A.  Y )  =  £"=[0  -Y.7., 
and  D  AY 1  denotes  the  Hamming  distance  between  X  and  Y. 
First,  we  show  by  means  of  a  counter-example  that  condition  (1)  is 
only  sufficient  but  is  not  necessary.  Then  we  state  and  prove  the 
necessary  sufficient  conditions  for  f-UEC  and  </-UED  codes,  and 
finally  give  some  concluding  remarks  of  how  this  result  complements 
the  previously  published  research  (2),  [3], 

II  Necessary  and  Sufficient  CoNDmoN 
We  first  show  by  means  of  a  counter-example  that  condition  (1)  is 
only  sufficient  but  not  necessary. 

Counter-example  Consider  a  simple  code  of  length  5.  C  =  {X  = 
ill  10..  Y  =  '00001)}.  It  is  easily  observed  that  DiX.Y)  = 
’>■  Y  X.  Y 1  =  4.  and  ,Y(  Y.  X )  =  1.  Neither  a)  nor  b)  of 
Condition  (1)  given  above  holds  for  t  =  2  and  d  —  3.  However, 
"  is  easy  to  show  that  C  is  a  2-UEC  and  3-UED  code.  Indeed,  it  is 
also  a  3-LEC  code  as  can  be  checked  by  an  array  decoding  table. 


The  necessary  and  sufficient  condition  for  /-LEC  and  ./  ./  2  t  - 
LED  code  is  given  next  by  the  following  theorem. 

Theorem:  A  code  C  is  a  '-LEC  and  •/  ./  ^  t  -LED  code  it  and 
c.  V  if  for  any  distinct  A.  Y  6  C. 

a )  A  1 X .  Y 1  +  A  :  A .  Y '  $  t  -  ■/  -  1.  or 
bi  mm{.Y' A.  Y>.  Y.Y..Y}  St  r  —  1.  or 
rt  max}  A'i  X.  Y  .Yi  Y.  X  1 }  >  ./  —  1.  and 
min{.Y:  X.  Y .Y;  Y.  A'}  £  1. 

Proof:  The  sufficiency  of  Condition  (2)  is  fairly  obvious,  since 
for  any  distinct  A.  Y  €  C.  we  have  the  following 

1)  Condition  a)  is  necessary  and  sufficient  for  r-EC  and  ./-ED  codes 
(Theorem  3  of  [2}).  Therefore,  a)  is  also  sufficient  for  /-LEC  and 
rf-UED  codes. 

2)  Condition  b)  is  necessary  and  sufficient  for  r-EC  and  .i//-LED 
codes  (Theorem  7  of  [2}).  Therefore,  b)  is  also  sufficient  for  t- LEC 
and  J-UED  codes. 

3)  Condition  c)  is  the  second  half  of  necessary  and  sufficient 
conditions  for  d-UEC  codes  (Theorem  6  of  (2))  Therefore.  0  is  also 
sufficient  for  f-UEC  and  d-UED  codes. 

To  prove  the  necessity  of  conditions  (2).  we  give  an  indirect  proof 
That  is.  we  assume  that  condition  (2)  does  not  hold  for  C  and  prove 
that  C  cannot  be  f-UEC  and  <f-UED.  By  negating  condition  (2).  we 
get  that  for  some  distinct  A.  Y  €  C. 

\(A.Y)  +  A(Y.A)  $  f  +  d  and  'j 
min{A'(  A.  Y ).  .Y<  Y.  A)}  $  f  and  V  13) 

max{.V(A.Y). .V|Y.  A)}  $  d  J 

or 

.V(X.Y)  +  .V(Y.A|  $  f  +  d  and] 
min{A'(  A.  Y).  .Y(Y.  A)}  $  f  and  >  (4) 

min{.Y(A.Y)..Y(Y.A)}  =  0.  J 

Note  that  in  condition  (4),  the  middle  part  is  clearly  redundant  and 
that  the  last  part  implies  that  A  and  Y  are  ordered. 

First,  we  assume  that  condition  (3)  holds  in  C.  We  need  to  note  that 
if  a  code  C  is  not  f-asymmetric  error  correcting  and  (/-asymmetric 
error  detecting  (f-AEC  and  d-AED),  then  it  cannot  be  f-UEC  and 
d-UED  either. 

We  assume  without  any  loss  of  generality  that  .YiA.Y'  $ 


,V(  Y.  A ).  Then  condition  (3)  implies  ti-.at 

* 

II 

/A 

.Y(Y.A)  =  d’ 

<  d  if 

$  d' )  and  for  A  = 

:  (  Ao.  A 1 .  ■  "  .  A  n  - 1  '• 

Y  =  (To.T,.- 

*  "  •  T  n  —  , 

1 ),  we  have 

A,  =  1  and 

T,  =0. 

for  1  6  /  =  {» 1 . rj. 

C  {0. 1.2.---.H  -  1} 

Xj  =  0  and 

T  j  =  1. 

for  ;  €  J  =  [ji-ji 

C  {0. 1.2.  -.'1  -  1} 
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where  /  n  J  =  0.  Obviously,  the  remaining  positions  of  A  and  Y 
are  equal.  That  is. 

A*  =  Ta.  (or  kiluJ. 

Consider  error  vectors  E ,-  and  £*•  as  follows: 

Ef  =  (Eo.El--  -.fn-l)- 
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Secret  Error-Correcting  Codes  (SECC) 
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As  computer  systems  are  expanding  to  many  applications,  the  emerence  of  reliable  end  secure  data  com¬ 
munications  has  become  an  important  issue.  The  conventional  approach  to  achieving  this  purpose  in  very  ineffi¬ 
cient.  Secret  error  •correcting  codes  (SECO  are  designed  to  solve  this  problem  in  one  enciphering  process.  In 
the  SECC,  only  the  authorized  user  can  correct  channel  errors  systematically.  Therefore,  the  presence  of  channel 
errors  would  only  increase  the  security  of  the  system.  A  Mock  SECC  encryption  scheme  using  nonlinear  codes 
is  proposed  to  realize  this  new  concept.  The  SECC  scheme  given  here  can  ate  be  used  to  augment  an  already 
enciphered  text,  such  as  DES  ciphertext,  to  obtain  a  stronger  cipher  as  »a0  as  correction  of  channel  errors. 

Indexing  terms  :  Algebraic-code  cryptosystem.  Joint  encryption  and  error  correction.  Secret  error-correcting  codes 


rrHE  demand  for  reliable,  secure  and  efficient  digital 
-*•  data  transmissions  and  storage  systems  has  been 
accelerated  by  the  emergence  of  large-scale  and  high 
speed  communication  networks.  In  1948,  Shannon 
demonstrated  that  errors  induced  by  a  noisy  channel  or 
proper  encoding  of  the  information  [l].  Since  Shannon’s 
work,  a  great  deal  of  developments  have  contributed 
toward  achieving  data  reliability  and  the  use  of  coding  for 
error  control  has  become  an  integral  part  of  modern 
communication  systems  and  digital  computers. 

Information  stored  in  computer  systems  is  particularly 
vulernable  to  eavesdropping.  Although  information 
can  be  protected  by  several  ways  (eg,  physical  control 
data  are  stored  in  physically  secure  place;  or  computer 
system  control  the  operating  system  provides  access  con¬ 
trol  mechanisms  to  check  user’s  authentication),  data 
encryption  is  the  only  cost-effective  way  to  provide  data 
secrecy  [2-71. 

As  computer  systems  are  expanding  to  many  appli¬ 
cations,  the  assurance  of  both  data  reliability  and  data 
secrecy  has  become  an  important  issue.  To  achieve  this 
purpose,  conventionally  the  first  step  is  to  encipher  a 
plaintext  (M)  into  a  ciphertext  and  the  second  step  is  to 
encode  the  ciphertext  into  a  codeword  (C)  using  an  alge¬ 
braic  code.  To  recover  the  plaintext  (M),  the  receiver 
decodes  the  received  word  (C'  -  C  +  Noise)  first  and 
then  deciphers  the  ciphertext  (Fig  1).  Since  data  enci¬ 
phering  and  data  encoding  are  implemented  in  two  separate 
«eps,  this  approach  has  the  disadvantage  of  inefficiency 
■a  the  implementation.  Combining  these  two  steps  into 
one  may  obtain  faster  and  more  efficient  implementation. 


This  Paper  wai  prw:ntcd  in  CTYPTO'88  at  University  of  Cali- 
r°raia,  Santa  Barbara,  Aug  21-23.  1988. 
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Fig  1  Conventional  approach  to  data  reliability  and  data  secrecy 

Joint  encryption  aad  error  correction  (JEEC)  scheme 

In  his  public-key  cryptosystem,  McEliece  applied 
error-correcting  capability  of  Goppa  codes  to  provide 
data  secrecy  [8].  His  idea  is  to  introduce  a  random  error 
vector  to  each  encoded  block  before  transmission.  The 
Hamming  weight  (f*)  of  the  error  vector  is  equal  to  the 
number  (f)  of  errors  the  code  can  correct.  Therefore, 
the  receiver  can  remove  the  error  vector  and  recover  the 
plaintext  by  applying  the  decoding  of  the  code.  Any 
unauthorized  user  cannot  do  so  without  decoding  keys 
because  the  general  decoding  problem  for  linear  codes 
is  NP-complete  [9]. 

Evidently,  if  t'  <  t,  then  up  to  t—t’  errors  may  occur 
in  the  channel  and  these  errors  can  be  corrected  by  the 
receiver.  Thus,  the  system  can  provide  both  data  secrecy 
and  data  reliability  simultaneously.  Since  there  is  a 
tradeoff  between  data  secrecy  and  data  reliability,  large 
distance  codes  and  large  block  length  codes  are  required 
in  this  scheme  [10,11].  Therefore,  the  scheme  has  the 
disadvantages  of  low  information  rate  and  high  decryp¬ 
tion  overhand. 

Definition  1 .  The  JEEC  scheme 

A  scheme  that  combines  data  encryption  with  data 
encoding  into  one  enciphering  process  while  providing  a 
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Pseudorandom  Bit 
Generators  in  Stream-Cipher 
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The  an  of  cryptography  as  a  means 
for  protecting  private  information 
against  unauthorized  access  is  as 
old  as  writing  itself.  Cryptography,  in¬ 
deed.  is  the  only  practical  means  for  sending 
information  over  an  insecure  channel,  be  it 
telephone  line,  microwave,  or  satellite.  The 
increasing  use  of  electronic  means  of  data 
communications,  coupled  with  the  growth 
of  computer  usage,  has  extended  the  need 
to  protect  information. 

Stream  ciphen  play  an  especially  im¬ 
portant  role  in  cryptographic  practices  — 
both  diplomatic  and  military  —  that  pro¬ 
tect  communications  in  the  very  high  fre¬ 
quency  domain.  The  central  problem  in 
stream-cipher  cryptography,  however,  is 
the  difficulty  of  generating  a  long  unpre¬ 
dictable  sequence  of  binary  signals  from  a 
short  and  random  key.  Unpredictable  se¬ 
quences  are  desirable  in  cryptography  be¬ 
cause  it  is  impossible,  given  a  reasonable 
segment  of  its  signals  and  computer  re¬ 
sources,  to  find  out  more  about  them.  Pseu¬ 
dorandom  bit  generators  have  been 
wdeiy  ujed  w  construct  these  sequences. 
Considerable  progress  has  been  made  in 
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The  information  age 
lends  new  dimensions 
to  the  art  of 
cryptography. 
Techniques  for 
encryption,  decryption, 
and  fending  off  attacks 
from  intruders  provide 
the  only  protection  of 
sensitive  data. 


the  design  and  analysis  of  pseudorandom 
bit  generators  over  the  last  decade.  The 
purpose  of  this  article  is  to  survey  some  of 
these  developments 


Background 

To  provide  the  general  background  for 
our  exposition,  we  begin  by  describing  a 
cipher  (see  Figure  I  >.  A  cipher  conceals  the 
plaintext  M  by  transforming  it  into  a  dis¬ 
guised  form,  called  the  ciphertext  C.  so  that 
only  the  authorized  receiver  can  transform 
it  back  to  the  original  plaintext  The  pro¬ 
cess  of  transforming  plaintext  into  cipher- 
text  is  called  encryption  or  enciphering. 
and  the  inverse  transformation  from  ci¬ 
phertext  to  plaintext  is  called  decry  ption  or 
deciphering. 

To  prevent  the  plaintext  from  being  eas¬ 
ily  revealed  by  an  unauthorized  person,  the 
sender  must  transform  a  given  plaintext 
into  a  large  variety  of  possible  ciphertexts 
selected  by  a  specific  parameter  This  pa¬ 
rameter  is  called  the  encryption  ke\  Kr  The 
receiver  then  deciphers  the  ciphertext  us¬ 
ing  the  decryption  key  Kt  In  a  public-key 
cryptoeystem.  K,  is  made  public  while  AT,  is 
kept  secret;  it  is  computationally  infeasible 
to  deduce  K,  from  Kr  In  a  pnvate-key 
cryptosystem,  the  sender  and  the  receiver 
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d -Functions  in  V^(F and  Self-decimation  of  m -Sequences 

Kenchcng  Zcng1,  Dih-Yca  Wei2,  and  T.R.N.  Rao2 


Abstract.  With  the  purpose  of  generating,  by  the  help  of  a  single  clock-controlled 
LFSR,  a  large  class  of  binary  sequences  strong  enough  for  cryptographic  application,  an 
extension  class  of  key-specifiable  transfer  Junctions  is  proposed  and  aruuyzed.  When 
tapped  as  feedforward  networks  to  the  LFSR  under  consideration,  these  functions  will 
control  the  stepping  of  the  latter  in  such  a  war  that  its  output  signals  will  be  decimated 
gseudo-randonuy  at  a  pre-assigned  rate.  The  decimation  rate  and  the  length  of  the 
LFSR  are  then  suitably  selected  so  that  the  resulting  sequence  will  have,  among  others, 
a  large  prime  period  and  a  linear  complescity  comparable  in  order  of  magnitude  to  the 
period.  Some  conclusions  concerning  the  average  and  maximal  implementable  decima¬ 
tion  rates  are  also  given. 


1.  Introduction 

On  the  basis  of  an  idea  put  forth  by  R.  Rueppel  [1],  W.  G.  Chambers  and  D. 
Goilmann  [2]  proposed  a  scheme,  as  shown  in  Figure  1,  to  decimate  the  signals  of 
an  m  -sequence  so  as  to  produce,  for  suitably  chosen  parameters,  a  binary  sequence 
with  a  prime  period p  and  linear  complexity  equal  top-1  orp. 


dock-2 


output 


dock-1 


Figure  1 

The  scheme  consists  of  an  » -stage  LFSR  with  an  alterable  primitive  feedback 
polynomial  and  a  k  -place  NOR  function  tapped  to  consecutive  positions  on  it,  to¬ 
gether  with  two  delay  elements  DX,D^  attached  respectively  to  the  output  ends  of 
the  LFSR  and  the  transferring  NOR  function.  The  delay  elements  are  controlled 
by  clock-1  which  works  at  a  fixed  speed  determined  by  the  channel  of  transmission, 
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Abstract 

A  strongly  fault-secure  (SFS)  ALU  design  based  on  the  Berger  check  prediction  (BCP) 
technique  is  presented  in  this  paper.  The  fault  and  error  models  of  a  large  class  of  VLSI 
ALU  designs  are  discussed.  The  proposed  design  is  proved  to  be  fault-secure  and  self-testing 
with  respect  to  any  single  fault  in  the  ALU  part  Then,  the  proposed  BCP  ALU  is  proved 
to  be  SFS  with  any  design  of  BCP  circuit.  Consequently,  a  self-checking  processor  whose 
data  path  is  encoded  entirely  in  a  Berger  code  can  be  achieved.  An  efficient  self-checking 
processor  can  then  be  designed. 
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A  DESIGN  METHOD  FOR  TOTALLY  SELF-CHECKING  AND 
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Abstract 

Self-checking  systems  design  is  an  important  technique  for  concurrent  error  detection  in 
fault-tolerant  digital  systems.  The  well-known  concepts  for  self-checking  systems  are  totally 
self-checking  (TSC)  circuits,  which  is  defined  to  be  both  fault  secure  and  self-testing,  and 
code-disjoint  (CD)  circuits.  The  ideal  self-testing  systems  should  consist  of  several  subsystems 
which  arc  all  TSC  and  CD.  This  paper  presents  a  design  method  of  TSC  and  CD  PLA  for 
combinational  circuits.  In  this  design,  the  input  and  output  of  a  combinational  circuit  arc  en¬ 
coded  in  systematic  unordered  codes.  It  should  be  mentioned  that  TSC  checkers  actually  are 
all  TSC  and  CD  combinational  circuits.  Therefore,  the  TSC  checkers  using  PLA  can  be  ob¬ 
tained  by  this  design  method. 
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Decoding  Algebraic-Geometric  Codes  up  to 
the  Designed  Minimum  Distance 

Gui-Liang  Feng  and  T.  R.  N.  Rao,  Fellow,  IEEE 


Abstract —  A  simple  decoding  procedure  for  algebraic-geo¬ 
metric  codes  CcnD.G)  is  presented.  This  decoding  procedure 
is  a  generalization  of  Peterson’s  decoding  procedure  for  the 
BCH  codes.  It  can  be  used  to  correct  any  j_(d*  -  1  )/2J  or  fewer 
errors  with  complexity  Ol  n 3 ),  where  d'  is  the  designed  minimum 
distance  of  the  algebraic -geometric  code  and  n  is  the  codelength. 

Index  Terms —  Error-correcting  codes,  algebraic -geometric 
codes,  decoding  procedure,  correcting  [(d*  —  1)/2J  errors. 


I.  Introduction 

THE  MOST  important  development  in  the  theory  of  error- 
correcting  codes  in  recent  years  is  the  introduction  of 
methods  from  algebraic  geometry  to  construct  linear  codes. 
These  so  called  algebraic -geometric  codes  were  introduced 
by  Goppa.  In  1982,  Tsfasman,  V14du{  and  Zink  [1]  obtained 
an  extremely  exciting  result:  the  existence  of  a  sequence  of 
codes  that  exceeds  the  Gilbert- Vanhamov  bound  [2],  For 
this  paper,  they  received  the  IEEE  Information  Theory  Group 
Paper  Award  for  1983.  Since  then,  many  papers  dealing  with 
algebraic-geometric  codes  have  followed  [3]-(10]. 

Good  code  constructions  are  very  important.  Moreover,  it  is 
desirable  and  important  to  derive  simple  decoding  procedures 
which  can  correct  as  many  errors  as  possible.  Justesen  et 
al  [11]  first  presented  a  decoding  procedure  for  codes  from 
nonsingular  plane  algebraic  curves.  This  decoding  procedure 
can  only  correct  [(<f  -  g  -  1)/2J  or  fewer  errors,  where  cf 
is  the  designed  minimum  distance  of  the  code  and  g  is  the 
genus  of  the  curve  involved  in  the  construction.  Skorobogatov 
and  Vlidut  [12]  generalized  their  ideas  and  gave  a  decoding 
procedure  which  can  correct  any  [(d*  -  g  -  1)/2J  or  fewer 
errors  for  codes  from  arbitrary  algebraic  curves.  Lb  their  paper, 
Skorobogatov  and  Vlidut  also  presented  a  modified  algorithm, 
correcting  more  errors,  but  in  general,  not  up  to  the  designed 
minimum  distance.  Using  profound  results  from  algebraic 
geometry,  Pellikaan  [13]  gave  a  decoding  procedure  which 
decodes  up  to  [(<f  -  1)/2J  errors.  However,  his  decoding 
procedure  is  very  complex  and  is  not  completely  effective. 
Recently,  Justesen  et  ai  [14]  improved  on  their  original 
decoding  procedure  in  several  ways  and  gave  a  new  decoding 
procedure  for  codes  from  arbitrary  regular  plane  curves,  which 
can  decode  up  to  [(d*  -  g/2  -  1)/2J  errors. 
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In  this  paper,  we  present  a  fairly  simple  decoding  pro¬ 
cedure  capable  of  decoding  up  to  [id’  -  1 1/2_  errors.  The 
improvement  is  obtained  by  using  a  form  of  majority  scheme 
to  find  unknown  syndromes  in  the  well-known  algorithm  The 
procedure  can  be  implemented  easily  by  hardware  or  softw  are. 

The  paper  is  organized  as  follows.  In  the  next  section,  for 
easy  reference,  we  include  a  fundamental  iterative  algorithm 
(FIA),  which  is  very  similar  to  the  Gaussian  elimination  and 
can  be  used  to  easily  derive  the  Berlekamp- Massey  algorithm 
and  the  generalized  Berlekamp -Massey  algorithm  [16].  Then 
we  modify  the  FIA  and  give  some  related  properties,  which 
will  be  used  in  other  sections.  In  Section  III,  a  new  decoding 
procedure  for  algebraic-geometric  codes  Cn(D.  G)  with  G  = 
mQ  is  presented.  In  order  to  easily  understand  this  decoding 
procedure,  one  example  is  shown  in  Section  IV.  Finally,  some 
conclusions  are  given  in  Section  V. 

D.  Fundamental  Iterative  algorithm 

In  this  section,  the  fundamental  iterative  algorithm  (FIA) 
[16]  is  modified.  This  modified  algorithm  is  our  main  al¬ 
gorithm  for  decoding  algebraic-geometric  codes  up  to  the 
designed  minimum  distance.  To  a  certain  extent  it  is  similar 
to  the  Berlekamp- Massey  algorithm,  which  is  the  main  algo¬ 
rithm  for  decoding  BCH  codes  up  to  the  designed  minimum 
distance.  For  easy  reference,  the  FIA  is  described  briefly  in 
the  following.  This  algorithm  is  for  finding  the  smallest  initial 
set  of  dependent  columns  in  a  matrix  over  any  field  F.  That 
is,  let 
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Error  Correcting  Codes  over  Z  „ 
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Abstract 

Algorithm-based  fault  tolerance  is  a  scheme  of  low-cost  error  protection  in  real-time  di¬ 
gital  signal  processing  environments  and  other  computation-intensive  tasks.  The  basic  idea  of 
algorithm-based  fault  tolerance  is  encoding  data  at  the  system  level  and  then  redesigning  the 
algorithm  such  that  it  can  detect  or  correct  errors  in  computation.  In  this  paper,  a  new 
method  for  encoding  data  is  proposed  and  furthermore,  two  kinds  of  error-correcting  codes 
over  Zf.,  which  can  be  used  with  fixed-point  arithmetic  in  practical  algorithm-based  fault 

tolerant  systems,  are  introduced.  In  addition,  two  simple  decoding  procedures  are  also  pro¬ 
posed. 
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Abstract 

Novel  totally  self-checking(TSC)  Berger  code  checker  designs  are  presented  in  this  correspondence. 
We  derive  the  generalized  Berger  check  partitioning  and  prove  that  a  TSC  Berger  code  checker  can  be 
constructed  from  a  TSC  wi-out-of-n  checker.  For  a  TSC  Berger  code  checker  design,  no  two-output 
checker  exists  for  information  length  2r_1 ,  for  any  positive  non-zero  r.  The  presented  approach  solves 
this  open  problem. 
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Abstract 

In  this  paper,  a  new  method  of  construction  of 
more  efficient  codes,  which  can  detect  t  unidirectional 
byte  errors  or  all  unidirectional  bit  errors  (  t- 
UbED/AUED  ),  is  presented.  In  this  construction, 
we  generalize  and  improve  the  t-UbED/AUED 
codes  proposed  by  Dunning  et  al.,  in  such  a  way  that 
two  weight  syndromes  need  not  be  protected  from 
unidirectional  errors  when  t  >  2.  Thus,  this  con¬ 
struction  is  more  efficient  and  can  be  applied  to  all 
multiple  unidirectional  byte  error-detecting  codes. 

Keywords:  bit  unidirectional  errors,  unidirec¬ 
tional  byte  errors,  memory  fault  tolerance,  error- 
detection  codes. 

I.  Introduction 

In  computer  memory  systems,  for  data 
stored  in  a  byte-pcr-chip  or  byte-per-card  fashion, 
byte  errors  tend  to  occur  [1-2].  Codes  have  been 
designed  for  byte-error  correction  and  detection 
[3-7],  and  also  for  their  detection  and  correction 
together  with  random  errors  [8-12]. 

The  faults  that  occur  in  many  computer 
memories  and  VLSI  circuits,  most  likely  cause 
'unidirectional  errors',  for  which  both  1—0  and 
0—1  errors  may  occur,  though  not  occurring 
simultaneously  in  a  single  data  word.  However, 
the  errors  in  one  byte  may  be  of  the  form  1—0 
while  in  another  byte  they  may  be  the  from  0—1. 
When  a  memory  is  handled  as  a  whole,  unidirec¬ 
tional  errors  of  a  single  form  may  occur  across 
the  entire  word.  Figure  1.1  contrasts  a 

■  This  work  wii  supported  in  put  by  the  OSct  of 
Naval  Research  under  Grant  N 0001 4-9 1-1-1067. 


unidirectional  error  with  a  unidirectional  byte 
error  affecting  two  byres. 

In  byte-organized  computer  memories,  tran¬ 
sient  and  permanent  faults  are  apt  to  cause  mul¬ 
tiple  unidirectional  byte  errors.  Codes  that  can 
detect  a  small  number  t  of  unidirectional  byte  er¬ 
rors  in  computer  memory  words,  composed  of 
small  m  information  bytes  each  containing  b  bits, 
and  which  also  detect  simultaneously,  all  uni¬ 
directional  errors  across  the  entire  memory  word, 
were  developed  in  [5-6],  These  codes  are  termed 
t-unidirectional  byte  error  detecting  and  all  uni¬ 
directional  error  detecting  (  t-UbED/AUED  ) 
codes,  and  always  use  two  additional  b-bit  bytes 
to  hold  the  parity  check  information.  Figure  1.2 
shows  the  general  form  of  a  codeword  including 
both  information  and  check  bytes. 
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Fig.  1.1  (a)  Unidirectional  error  example. 

(b)  2-Unidirectional  byte  error  example. 


In  this  paper,  we  generalize  the  construc¬ 
tion  of  t-UbED/AUED  codes  in  [6]  to  any  t  and 
further  improvise  the  construction  for  t  >  3. 
The  organization  of  this  ptper  is  follows.  In  the 
next  section,  we  briefly  review  the  general  prin¬ 
ciple  of  construction  of  t-UbED/AUED  codes. 
Then  we  generalize  the  construction  proposed  by 
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True  Designed-Distance  Decoding  of  a  Class  of  Algebraic-Geometric  Codes, 
Pari  I:  Proving  the  Designed  Distance  without  Riemann-Roch  Theorem 


G.  L.  Feng.  V  K.  Wei.  T.  R.  Rao.  and  K.  K.  Treng 


Abstract 

A  new  decoding  procedure  for  algebraic-geometric  coties  is  presented.  For  codes  from  a  large  cla"«  or 

i  d*  -  1 

irreducible  plane  curves,  including  the  Hermitian  curve,  it  can  correct  up  to  i_ — - — errors,  where  d"  is  the 

designed  minimum  distance.  With  it  we  also  obtain  a  proof  of  r/,mil>r/*  without  using  Riemann-Roch 
Theorem.  In  this  part,  we  present  the  theory  and  the  basic  algorithm.  In  Part  II,  we  present  a  fast  implementa¬ 
tion  whose  complexity  is  0(nlu  ). 

Index  Terms:  algebraic  geometry  codes,  decoding,  Hermitian  curve.  Riemann-Roch  Theorem.  Gauss 
elimination. 
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True  Designed-Distance  Decoding  of  a  Class  of  Algebraic-Geometric  Codes, 
Part  II:  Fast  Algorithms  and  Block  Hankel  Matrices 


G.  L.  Feng- .  V.  K.  Wei  ■ .  T.  R.  Run *,  and  K.  K.  Tzengi 

Abstract 

We  present  fast  Gauss  elimination  algorithms  for  Hankel  matrices  ami  block  Hankel  matrices.  In  combi¬ 
nation  with  other  procedures,  we  obtain  a  true  dcsigned-minimum-distance  decoding  algorithm  with  complex¬ 
ity  Oin  )  for  die  class  of  algebraic-geometric  codes  studied  in  Part  I.  These  Gauss  elimination  algoridims 
arc  also  useful  in  several  other  decoding  and  shift-register  svndiesis  applications. 

Index  Terms:  Algebraic  geometry  codes,  decoding,  Gauss  elimination,  Hankel  matrix,  block  Hankel 
matrix.  Shift-register  synthesis. 
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Abstract 

A  self-checking  processor  <SCP)  is  a  processor  that  is  designed  with  concurrent  error  detect,  r. 
iGED)  capability  CED  is  an  error-fault  detection  process  that  is  designed  to  operate  concurrenti>  * 
the  normal  processor  operations  CED  is  a  very  important  and  necessary  feature  in  WSI  process  r 
arrays  that  are  integral  to  real-time  applications  Due  to  ns  operative  nature,  anthmeuc  and  logic  units 
(ALUs)  are  the  most  difficult  functional  circuit  to  check  among  the  components  of  a  processor  In  tnis 
paper,  we  present  an  efficient  design  of  a  32-bit  strongly  fault-secure  iSFS)  ALU  using  a  Reduced 
Berger  code.  A  reduced  Berger  code  is  used  to  encode  both  operands  and  the  computauon  resuits 
This  reduced  Berger  code  uses  only  the  two  least  significant  check  bits  of  its  Berger  code  counterpart 
regardless  of  information  length.  Since  a  Berger  code  requires  T  log2(n  «■  1  )1  check  bits  for  n  inter 
matron  bits,  the  applicauon  of  reduced  Berger  code  yields  mote  efficient  implementation  of  a  strong  A 
fault-secure  ALU  than  the  previously  proposed  techniques. 


1.  Introduction 

The  complexity  of  an  IC  chip  increases  significantly  as  a  result  of  the  advent  of  \er> 
large  scale  integrated  (VLSI)  technology.  A  modem  microprocessor  built  on  a  single  v  LSI 
chip  is  more  complex  than  a  medium  scale  computer  just  a  few  years  ago.  Since  the  future 
WSI  circuits  should  be  more  dense  with  smaller  feature  sizes,  the  permanent  and  transient 
faults  are  more  likely  to  occur  in  the  future  WSI  circuits  than  that  at  the  present  time.  Concur¬ 
rent  error  detection  (CED)  is  thus  vital  for  the  success  of  future  WSI  development. 

A  self-checking  processor  (SCP)  is  a  processor  that  is  designed  with  concurrent  error  detection 
(CED)  capability  CED  is  an  error/fault  detection  process  that  is  designed  to  operate  concurrently  wuh 
the  normal  processor  operations.  CED  is  a  very  important  and  necessary  feature  m  WSI  processor 
strays  that  are  integral  to  real-time  applications,  since  the  error  latency  ume  will  be  very  small  so  as  to 
enable  fast  error  recovery  and  to  prevent  system  crashes.  SCP  can  be  very  effective  in  fault-tolerant 
computer  system  design.  Important  classes  of  SCP  include:  a  totally  self-checking  iTSO  processor 
and  a  strongly  fault- secure  (SFS)  processor.  A  typical  TSC  or  SFS  processor  consists  of  a  TSC  or  SFS 
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A  Simple  Approach  for  Construction  of  Algebraic  Geometric  Codes 

from  Affine  Plane  Curves 
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Abstract 

The  current  algebraic-geometric  (AG)  codes  are  based  on  the  theory  of  algebraic  geometric  curves.  In 
this  paper,  we  present  a  simple  approach  for  the  construction  of  AG  codes  which  does  not  require  an  exten¬ 
sive  background  in  algebraic  geometry.  Given  an  affine  plane  irreducible  curve  and  all  its  rational  points, 
we  can  find  a  sequence  of  monomials  x  V  based  on  the  equation  of  the  curve.  Using  the  first  r  monomials 
as  a  basis  'or  the  dual  code  of  a  linear  code,  the  designed  minimum  distance  d  of  the  linear  code,  called  AG 
code,  can  be  easily  determined.  For  these  codes,  we  show  a  fast  decoding  procedure  with  a  complexity 
0(fl7/3),  which  can  correct  errors  up  to  l(d-l  )/2j.  For  this  approach  it  is  neither  necessary  to  know  the 
genus  of  curve  nor  the  basis  of  a  differential  form.  This  approach  can  be  easily  understood  by  most 
engineers. 

Index  Terms:  algebraic  geometric  codes,  fast  decoding,  minimum  distance,  error-correcting  codes. 
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Abstract 

Most  of  the  research  work  in  the  area  of  algebraic  geometric  (AC)  codes  deals  with  the  construc¬ 
tion  of  AG  codes  from  plane  algebraic  geometric  ctaves.  But,  some  work  pertains  to  the  construction  of  the 
AG  codes  from  nan-planar  algebraic  geometric  oaves.  However,  longer  AG  codes  must  have  relatively 
larger  genus  and  should  only  be  the  codes  constructed  from  non  - planar  curves.  In  this  paper,  we  present  a 
new  construction  of  a  class  of  AG  codes  from  curves  in  high-dimensional  projective  spaces.  For  this  con¬ 
struction,  it  is  easy  to  determine  the  designed  minimum  distance  and  find  the  parity  check  nudrix.  end  the 
decoding  up  to  the  designed  minimum  distance  is  fast.  Furthermore,  this  approach  can  be  easily  under¬ 
stood  by  most  engineers. 


I.  Introduction 

The  most  important  development  in  the  theory  of  error-correcting  codes  in 
recent  years  is  the  introduction  of  methods  from  algebraic  geometry  to  construct 
linear  codes  [1-3].  These  so-called  algebraic  geometric  codes  (AG  codes)  were  intro¬ 
duced  by  Goppa  in  1980.  In  1982,  Tsfasman,  Vladut  and  Zink  [4]  obtained  an 
extremely  exciting  result:  the  existence  of  a  sequence  of  AG  codes  which  exceeds  the 
Gilbert-Varshamov  bound  [5],  For  this  paper  they  received  the  IEEE  Information 
Theory  Group  Paper  Award  for  1983.  Since  then,  many  papers  dealing  with  algebraic 
geometric  codes  have  followed  [6-16].  However,  most  of  these  papers  deal  only  with 
the  AG  codes  obtained  from  plane  curves. 

The  greatest  advantage  of  AG  codes  is  that  they  offer  more  flexibility  in  the 
choice  of  code  parameters.  Most  importantly,  for  a  fixed  finite  field  Ff ,  there  are  AG 
codes  having  any  length.  It  is  known  that  ’he  coordinates  of  AG  codes  are  the  rational 
points  of  algebraic  geometric  curves.  Thus,  greater  the  number  of  rational  points, 
longer  die  length  of  the  AG  code.  Over  Ff,  the  number  of  rational  points  of  any  plane 
algebraic  geometric  curve  is  obviously  less  than  q*  +  q  +  1.  Thus,  actually  useful  AG 
codes  should  be  the  AG  codes  constructed  from  curves  in  high-dimensional  projective 
spaces  (HDAG  codes).  In  [17],  Pellikaan  et  al  constructed  a  large  class  of  codes 
Cram  non-planar  curves.  Justesen  et  al  in  [6],  first  gave  a  description  of  algebraic- 
geometric  codes  defined  only  by  monomials.  Following  this  description  of  AG  codes, 
in  [18],  a  simple  approach  for  the  construction  of  AG  codes  from  affine  plane  alge¬ 
braic  geometric  curves  has  been  proposed.  This  new  approach  can  be  easily  under¬ 
stood  by  most  engineers.  In  this  paper,  we  generalize  the  results  in  [18]  to  the  case  of 
curves  in  high-dimensional  projective  spaces  and  further  present  a  construction  of  a 
class  of  HDAG  codes.  The  codes  considered  here  are  essentially  the  algebraic- 
geometric  Reed-Muller  codes  [19]. 
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Abstract 

It  is  well  known  that  the  receiver  with  an  erasure  option  can  improve  thi  probability  of  decoding 
error.  It  is  desirable  to  find  as  simple  a  decoding  algorithm  as  possible  for  correcting  erasures  as  well  as 
errors.  Such  an  algorithm  enables  one  to  carry  out  a  generalized  minimum  distance  decoding  for  further 
improving  the  probability  of  decoding  etTor.  Forney  [I]  first  formulated  an  erasures-and-errors  decoding 
algorithm  for  BCH  codes.  Berlekamp  [2]  formulated  an  elegant  erasures-and-errors  decoding  algorithm 
for  BCH  codes  based  on  his  error-only  decoding  algorithm.  For  Goppa  codes,  Sugiyama  et.  al  presented 
an  erasure-and-error  decoding  algorithm  in  [3].  In  this  paper,  we  present  an  erasures-and-error  decoding 
procedure  for  AG  codes,  that  includes  the  errors-only  decoding  procedure  [4-6]  as  a  special  case. 

Let  the  number  of  erasure  locations  be  p  and  let  the  erasure  locations  be  /**<,,.  PKai . 

where  p  <  d*  and  d*  is  the  designed  minimum  distance.  Thus,  any  pattern  of  v  errors  and  p  erasures  can 
be  decoded,  provided  2v-i- 1  +  p  <  d*  is  satisfied. 

For  convenience,  let  us  consider  the  AG  codes  from  plane  curves  with  a  basis  of  monomials  as 

shown  in  [5-7].  In  this  case,  Pn(|l)  -  *<,»))•  For  general  AG  codes,  it  is  straightforward.  Let  T. 

p 

-  £  and  let  T  be  this  matrix,  in  which  the  first  row  and  the  first  column  consist  of  elements 

H  a  1 

of  ^  Tij  I  x‘yJ  are  in  increasing  order  h  i.e.,  ^  x‘yJ  }  are  the  first  d*  +  g  - 1  monomials  of  H{  1 )  or  H ' 2  ’ . 
and  in  which  if  the  entry  at  the  first  row  and  column  *  of  T  is  supposed  to  be  ru  v  and  the  entry  at  the  first 
column  and  row  h  of  T  is  supposed  to  be  T,j,  then  the  entry  at  row  h  and  column  *  of  T  is  T, 

Let  S  be  a  syndrome  matrix  and  S  be  a  matrix  modified  from  S,  by  substituting  zero  for  all  unknown 
syndromes.  Let  I  be  the  (d*+g  -  l)x(d*+g  - 1)  identity  matrix. 

Appling  the  Gauss  elimination  to  matrix  T  by  only  row  operations,  we  obtain  T*  from  T.  Perform¬ 
ing  the  same  row  operations,  I  is  transformed  to  I*,  S  to  S*.  and  S  to  S*.  Then  each  row  in  I* 
corresponding  to  the  zero  row  of  T*.  is  an  erasure  locator  polynomial.  The  matrix  S**  obtained  by  delet¬ 
ing  the  rows  in  S*.  which  correspond  to  the  nonzero  rows  in  T*,  is  called  a  modified  syndrome  matrix  for 
the  erasure  locations.  S  *  is  called  a  discrepancy  matrix. 


This  work  was  supported  in  part  by  the  Office  of  Naval  Research 
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